Ibhuloho le-TAP le-pfSense: izindawo ezintathu lapho ifreyimu ingafa khona
Ibhuloho, amalungu alo kanye neswishi ebonakalayo kunquma ngakunye. Thola ukuthi yimuphi umnikazi ohlunge ngaphambi kokucisha isilawuli ebesingakaze sibe sendleleni.
Ucisha umthetho kusixhumi se-LAN, ifreyimu isanyamalala, futhi isiphetho ukuthi i-pfSense ishaya indiva i-firewall yayo uqobo. Okuvame ukwenzeka ukuthi omunye umnikazi uthathe isinqumo: ibhuloho ngokwalo, isixhumi selungu, noma iswishi ebonakalayo ngaphandle kwesivakashi. Ngakunye kunesilawuli saso kanye nelogi yaso.
Le mikhawulo emithathu engezansi kufanele yehlukaniswe ngaphambi kokushintsha isilungiselelo, ngoba ukucisha okukodwa akukwazi ukunxephezela okunye.
Ifreyimu eyodwa, abanikazi abathathu benqubo
Ifreyimu evela kuklayenti le-TAP ingena ngethuluzi le-tunnel, yeqe ibhuloho le-pfSense, iphume ngelungu le-LAN, bese idlula iswishi ebonakalayo ngaphambi kokufinyelela noma yini. Ngaphakathi kwesivakashi, ukuhlunga kungenzeka ebhulohweni noma ezixhumeni zamalungu, futhi ukuthi yikuphi okusebenzayo kuwukukhetha kokumiswa hhayi isici esingaguquki. Ngaphandle kwesivakashi, i-hypervisor inquma ukuthi leyoadapha ebonakalayo ingathumela yini amafreyimu ane-MAC yomthombo engeyona eyayo. Ukwehla kunoma yiliphi kulawa maphuzu kubonakala kufana kusukela kuklayenti.
Bhala indlela ehlosiwe ngaphambi kokuphenya: ilungu le-tunnel, ibhuloho, ilungu le-LAN, iswishi ebonakalayo, indawo. Bese ubuza ukuthi yimuphi umnikazi kuleyo ndlela owayengayibona ifreyimu.
Yisiphi isilawuli se-pfSense esihlungayo
I-pfSense ibhala ama-sysctl amabili walokhu, elilodwa lokuhlunga kumalungu ebhuloho nelinye lokuhlunga ebhulohweni ngokwalo, futhi okungenani elilodwa kufanele lihlale lisebenza. Ukuhlunga ezingeni lebhuloho kusebenza kuthrafikhi efika ngamalungu ebhuloho, ngakho-ke kungena ngendlela hhayi ukulingana. Funda imithetho kusixhumi esihlunga ngempela, ngoba umthetho obekwe elungwini elingenandima yokuhlunga awenzi lutho. Imibhalo yokuhlunga kwebhuloho ichaza ubunikazi.
Isixhumi selungu esingenakho ikheli le-IP asinayo imakhro yekheli noma yesubneti yaso, ngakho umthetho obhalwe ngokumelene naleyo makhro ungachaza okunye hhayi i-LAN obuyiqonde. Sebenzisa izinto zenethiwekhi ezabelwe ngamabomu esikhundleni samamakhro okunethezeka.
Icezu akusilo ifreyimu
Amafreyimu e-Ethernet athwala amaphakethe e-IP, futhi iphakethe le-IP lingaba icezu ledathagram enkulu, ngakho la mabili amagama awashintshani. Kukhona nephakethe langaphakathi ngaphakathi kwe-tunnel nephakethe lokuthutha langaphandle, futhi ukwehluleka kungaba ngokwakho kokubili. I-ping encane ihlola indlela eyodwa kuleyo stack futhi ayifakazeli lutho ngokudluliswa okukhulu. Qhathanisa ukushintshana okwehlulekayo emikhawulweni emibili eseduze futhi ufunde isizathu sokwehla ngaphambi kokusola umthetho.
Uma amacezu enyamalala, impendulo iwukulungiswa okulinganiselwe noma uphenyo losayizi wephakethe, hhayi isinqumo sokucisha ukuhlunga ngokuphelele.
I-hypervisor inesinqumo sayo sokwamukela
Isivakashi esenza ibhuloho lethrafikhi kwezinye izintshumayelo sikhipha amafreyimu amakheli awo e-MAC yomthombo okungeyona eyeadapha yaso, futhi izwishi eziningi ebonakalayo zikuthatha njengokukhohlisa ngaphandle uma iqembu lephothi likuvuma. Ukuvumela lokho kuthumela nokuvumela i-adapha ukuthi yamukele wonke amafreyimu kuyizilawuli ezihlukene, futhi ukusebenzisa kokubili yonke indawo wushintsho olukhulu kakhulu kunalokho okudingwa yinkinga. Thola ukuthi yimaphi amafreyimu ibhuloho okufanele liwamukele futhi okufanele liwathumele, bese unikeza lokho kuziphatha kuphela emkhawulweni ongumnikazi wako. Gcina ukufinyelela kwekhostolo ngaphambi kokushintsha ibhuloho elilawulwa kude.
Ukubuyisela ukuxhumana kuyingxenye yokuhlolwa; ingxenye esele ukuqinisekisa ukuthi ukugeleza okufanele kuhlale kuvinjiwe kusavinjiwe.
Rekhoda ukuthi yimuphi umnikazi ohlunge, yisiphi isilawuli esishintshile nokuthi yikuphi ukugeleza okubili okuqinisekisile. Leyo rekhodi ivimbela isigameko esilandelayo ukuthi singaqali ngomqondo ofanayo wokuthi i-pfSense iyazishaya indiva.